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REMARKS 

Minor editorial corrections have been made to the specification. Claims 1-2, 8-11,15- 
18 ? and 22-23 have been amended. Claims 24 - 30 have been added. No new matter has been 
introduced with these corrections, amendments, or added claims, all of which are supported in the 
specification as originally filed. Claims 1 - 30 are now in the application. 

I. Status Updates to the Specification 

Paragraph 2 of the Office Action dated February 19, 2004 (hereinafter, 'the Office 
Action") requests that the status of citations of U. S. applications be updated in the specification. 
Appropriate amendments have been made herein. 

II. Terminal Disclaimer 

Paragraph 3 of the Office Action states that Claims 1 - 6, 8, 10 - 13, 15, 17- 20* and 22 
are provisionally rejected under the judicially-created doctrine of obviousness-type double 
patenting as being unpatentable over Claims 1 - 6, 8 - 12, 14 - 18, and 20 of co-pending 
Application Nbr. 09/619, 205 (which Applicants' interpret as an intended reference to co-pending 
application 09/619,912). A terminal disclaimer is submitted herewith, and the Examiner is 
respectfully requested to withdraw this rejection. 

Ill- Rejection Under 35 U.S.C. S102fe) 

Paragraph 4 of the Office states that Claims 1 - 2, 5 - 6, 8, 10 - 1 1 13, 15, 17 - ] 8, 20, 
and 22 are rejected under 35 U.S.C. §102(e) as being anticipated by U. S. Patent 6,105,131 to 
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Carroll. This rejection is respectfully traversed. 

Applicants have amended their independent Claims I, \0> and 17 herein to more clearly 
specify which entities are performing which limitations. While Carroll does discuss authentication 
using digital certificates, a correlation between Applicants' claim limitations and Carroll's 
teachings cannot be made when Applicants' claim limitations are analyzed in detail (including 
which entity performs each limitation)* Carroll's teachings and Applicants 7 claim limitations will 
now be discussed in more detail 

Applicants' independent claims specify a secure session established between a client 
machine and a server machine, and a session established between that server machine and a host 
system. Furthermore, Applicants* claim limitations specify use of a host access security system 
and that the session is established using a legacy host communication protocol Carroll has no 
teaching of using a host access security system or a legacy host communication protocol 

The text cited in the Office Action for "... accessing a stored password or generating a 
password substitute which is col 3, lines 21-33 (see lines 6 - 8 on p. 5 of the Office Action), 
refers to the key ring organizer ("KRO") protecting keys at the client This is not generation of a 
password substitute, nor accessing a stored password, by a host access security system- 

In addition, Applicants find no teaching in Carroll that a first sign-on request identifies a 
secure legacy hopt application to which sign-on is requested; that a stored password or password 
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substitute generated bv a host access security system is returned to a server, along with a user 
identifier corresponding to credentials; or that a subsequent sign-on is in any way enabled during a 
secure session. 

Applicants note that the citations beginning at Hoe 13 of p. 5 of the Office Action and 
continuing to line 1 8 of p. 6 are in terms of the claim language of co-pending application 
09/619,9 12. A number of differences exist between the claim language of that application and the 
claim language of the present application. For example, the term "second digital certificate**, 
appearing in line 14 of p. 5 of the Office Action, is not part of the claim language of the present 
application. The claims of the present application are directed toward using the same digital 
certificate for the subsequent sign-on as was used in the first sign-on. This is because, in the 
present invention, the user identity is not changing between the first and subsequent sign-ons. 
Applicants believe the amendments made herein to their independent Claims 1 , 10, and 17 make 
this clearer. 

Because the analysis presented in the Office Action of the limitations pertaining to the 
"subsequent sign-on" are not in terms of the claim language of Applicants' claims as originally 
submitted (and amendments to that claim language have been made herein), that analysis will not 
be discussed in detail herein. (Note that the cited references have been discussed in the response 
dated March 1 0, 2004 for the co-pending application, in terms of the claim limitations of that co- 
pending application.) Applicants respectfully submit that Carroll has no teaching of these 
"subsequent sign-on" limitations firom independent Claims 1 , 10, and 17. In particular, Applicants 
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find no teaching in Carroll of re-authenticaling a user within the scope of a secure session, where 
that re-authentication enables the user to transparently sign on to a different legacy host 
application or, alternatively, to the same legacy host application (where this alternative as to the 
target host application is represented in Applicants' amended claims using the language "a second 
secure legacy host application ... [which] maybe identical to said first secure legacy host 
application"; see, for example, lines 39 - 42 of amended Claim 1). 

Accordingly, Applicants respectfully submit that their independent Claims 1, 10, and 17 
are patentable over Carroll. Dependent Claims 2, 5 - 6, 8, 1 1 ? 13, 15, 18, 20, and 22 are therefore 
deemed patentable over Carroll as well. Accordingly, Applicants respectfully request thai the 
Examiner withdraw the §102 rejection. 

IV. Rejection Under 35 U.S.C. S103(al 

Paragraph 5 of the Office Action states that Claims 3 - 4, 12, and 19 are rejected under 35 
U.S.C. §103(a) as being uiqjatetrtabie over Carroll in view of U- S« Patent 6,178,51 1 to Cohen et 
al. This rejection is respectfully traversed. 

As demonstrated above, Applicants submit that their independent claims are patentable 
over the teachings of Carroll. Cohen therefore cannot be combined with Carroll to render 
dependent Claims 3 - 4, 12, or 19 unpatentable. The Examiner is therefore respectfully requested 
to withdraw the §103 rejection. 
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V. Conclusion 

Applicants respectfully request reconsideration of the pending rejected claims, withdrawal 
of all presently outstanding rejections, and allowance of all claims at an early date. 

Respectfully submitted, 




MarciaL. Doubet 
Attorney for Applicants 
Reg. No. 40,999 
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